Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
File:                     Zrds5_7vaVb437n4vDoiiGG5ny4.mft (raw, json)
Hash identifier:          fR4MZ9KQTdYwUu3bQC647DDHClSKKHFhs78YoTKvIt4=
Subject key identifier:   6D:96:A7:D5:0A:2D:6A:A5:87:49:4A:BC:38:A7:17:5C:19:82:53:13
Authority key identifier: 66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E
Certificate issuer:       /CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e
Certificate serial:       019FA0DFD9557E541007FD5C8D0767D46B7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
Manifest number:          01E6
Signing time:             Mon 27 Jul 2026 00:00:52 +0000
Manifest this update:     Mon 27 Jul 2026 00:00:52 +0000
Manifest next update:     Tue 28 Jul 2026 00:00:52 +0000
Files and hashes:         1: DneugekopIxK304C8pLImv6Qcv0.roa (hash: +cGEhJmcpfO0fbmJYvL9sDH0f2ClBmDUFG+o22CeZUs=)
                          2: Zrds5_7vaVb437n4vDoiiGG5ny4.crl (hash: MJxyTmxDSaSVJfWM2SCsmpmQB3HUbZ4Erq7O4FD4xzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:df:d9:55:7e:54:10:07:fd:5c:8d:07:67:d4:6b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e
        Validity
            Not Before: Jul 27 00:00:52 2026 GMT
            Not After : Jul 28 00:00:52 2026 GMT
        Subject: CN=6d96a7d50a2d6aa587494abc38a7175c19825313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d3:71:74:b6:99:5f:4e:54:bb:d0:ad:3a:d4:
                    6f:da:83:84:74:cb:72:4d:48:75:9a:83:fa:c3:bb:
                    dc:21:e3:01:63:c3:4c:51:e7:ba:a8:70:88:b7:9a:
                    9e:0f:52:02:b6:fd:aa:83:99:77:3d:4b:f7:b4:12:
                    16:7c:71:dc:4e:db:59:24:06:ad:37:d6:76:f1:6d:
                    3e:68:36:11:b3:85:f6:95:f7:35:0e:2f:d8:d2:d4:
                    d4:d0:35:aa:19:de:71:98:e8:30:a4:55:e2:b6:e4:
                    27:46:f2:5d:f4:9b:f9:b0:0c:c7:33:fa:e8:d7:de:
                    51:fc:7c:83:14:ae:c6:2a:4c:91:a8:2f:98:7e:98:
                    da:da:26:d6:f0:f1:11:0b:ef:62:d6:49:53:34:0a:
                    69:fe:41:2a:de:88:8a:a1:6e:11:e0:41:0f:c8:71:
                    ef:bf:2e:24:90:58:12:d3:cf:ea:2c:f0:fb:62:aa:
                    95:82:62:01:7b:af:cd:14:61:af:75:07:d4:09:fc:
                    15:2f:28:53:6b:8a:6d:bb:d3:af:8e:f5:1b:2a:13:
                    b1:16:7e:80:80:8a:28:db:9a:fd:4b:a7:4c:8d:dc:
                    03:03:1a:9c:44:a5:3d:1b:00:2b:e5:63:96:84:4d:
                    57:c5:4f:f8:c1:84:d7:4f:fe:1e:4f:d2:7c:f1:71:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:96:A7:D5:0A:2D:6A:A5:87:49:4A:BC:38:A7:17:5C:19:82:53:13
            X509v3 Authority Key Identifier:
                keyid:66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:18:40:20:7d:1a:47:b3:e4:14:31:24:3a:6f:9c:9f:ac:8f:
         4c:87:7e:2a:00:ee:90:e8:59:b8:76:ca:0b:0f:d9:19:ea:bd:
         36:30:3c:3e:12:2a:8e:96:40:5a:67:29:16:04:36:8a:45:5a:
         85:a9:e0:3e:81:75:47:b6:82:13:ed:e6:e1:72:30:2c:43:72:
         33:bc:79:e1:f0:d8:e4:7e:17:33:6d:6f:da:54:f5:cb:d6:87:
         12:c1:3d:29:52:dc:68:64:ba:6d:8e:84:91:5f:de:3a:d9:18:
         19:ee:92:51:85:0e:bf:27:e8:38:05:f6:25:e7:d3:4e:93:18:
         f9:cb:3a:c1:48:25:a8:a8:e9:f7:d0:37:40:6a:7d:bb:60:27:
         ec:15:c0:92:88:38:9e:e7:6b:b9:06:d2:b8:fc:c3:f3:96:b7:
         20:c3:44:92:e7:35:18:b7:fd:0a:63:68:e0:62:32:91:fc:84:
         25:0a:47:4b:cd:37:be:4d:9a:49:d5:13:6a:76:8f:5e:e6:d2:
         6d:59:63:fd:47:f6:9e:f9:6f:9f:57:99:11:94:82:07:91:5f:
         80:fb:64:37:e6:5f:f0:b3:d9:c0:3b:b8:75:8d:3c:25:b9:c5:
         c0:bc:60:7d:cc:b3:85:59:c0:b9:b8:e3:f4:1f:c7:7f:45:14:
         01:ff:f4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:29 2026 by rpki-client